5f684570217d72c6b7e118c9f20e00c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f684570217d72c6b7e118c9f20e00c4_JaffaCakes118
Size

17KB
MD5

5f684570217d72c6b7e118c9f20e00c4
SHA1

d7d38b29fd67381ff6022f0c30bfc5ed77266bbb
SHA256

62409cb74d1fc8a8b04b3c87ad18c25983163f076f7c80fdf6ed68ad9fa45bfc
SHA512

cb8941ded6a7fef24f973c25736c748fc8ddc4778704e09e068fba0529572e0744a87c8973964ccf29a2ecd7963fe16f9dbbb8c7255e48636e4ca192fbc9e266
SSDEEP

384:I72aaClW098pHTTYkF0B4whrALRP3o5BEnUJACzYcCe:M2WSRcA0hCn+FzYcCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f684570217d72c6b7e118c9f20e00c4_JaffaCakes118

Files

5f684570217d72c6b7e118c9f20e00c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Rob\Desktop\m\mBot\m\m\obj\Release\m.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ